Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: bZY/BbvWJV/SafgD4jwViesempmiHrQzwZOAm6HuTLc=
Subject key identifier: B3:92:19:F1:DA:F4:2E:E4:45:D0:61:BC:95:BF:82:98:88:7B:D5:D4
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0199FCC691F2FA0A3590F136F3D73309F3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0C4F
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: ImrSY1QjddcJaelpC2metYuLRpr2757quSNg3h2Qpe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:91:f2:fa:0a:35:90:f1:36:f3:d7:33:09:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=b39219f1daf42ee445d061bc95bf8298887bd5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:c9:89:2f:6c:a0:d3:76:ee:7a:4b:0b:20:
aa:41:79:05:8b:57:51:aa:a3:d3:04:f2:d7:61:bf:
82:81:37:0d:ef:62:3a:f3:ae:a1:00:e6:21:83:2b:
60:11:ee:64:09:b7:14:f9:a4:5c:84:f8:be:b2:49:
60:4e:99:d7:30:58:d6:3e:a4:40:82:b4:a7:bc:bc:
22:23:c1:75:93:4e:7f:87:3c:95:d3:9f:c8:ea:93:
16:63:d4:0b:de:96:92:c7:d7:00:23:fd:bc:e6:29:
91:b4:ef:dd:7b:24:9b:0c:9a:c4:e6:da:6e:99:40:
41:08:95:18:f6:91:c6:e5:de:b3:79:57:a0:ab:b5:
19:a9:0e:f4:d5:b6:e0:70:bb:8f:5c:fb:e9:d2:85:
d6:45:50:de:ab:72:a1:3f:6b:58:41:f4:e3:6b:e6:
1d:25:9c:63:55:35:44:58:08:3e:7d:8f:74:e4:0d:
7f:73:e9:ef:80:3a:05:a4:43:11:06:af:02:08:b2:
23:2e:9f:7b:e0:ec:5b:f7:50:7e:1f:76:81:91:14:
47:21:ea:fd:c7:33:83:81:44:9a:a1:bc:7f:83:2d:
de:0d:fb:55:77:ad:e0:0c:96:b3:f5:29:ef:9c:ff:
20:c2:c5:7d:64:64:a9:82:02:13:7e:67:3f:e2:3a:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:19:F1:DA:F4:2E:E4:45:D0:61:BC:95:BF:82:98:88:7B:D5:D4
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0d:eb:31:43:48:46:fa:d4:fd:a9:87:36:03:42:e9:09:b0:
fd:e0:8e:37:e7:9f:ff:4f:ce:b3:38:dc:2e:82:14:81:9a:3b:
30:e7:8a:9f:4b:04:c7:b0:2e:86:8d:5a:9e:8e:20:4f:b7:29:
84:cb:59:1a:87:41:e7:38:7c:a9:9e:c7:87:22:56:04:e8:74:
ce:67:84:7b:3c:13:3a:b7:a0:6f:d3:90:cb:ef:22:c9:a6:59:
03:cd:94:63:0d:2b:76:25:74:b4:4f:83:28:ae:90:79:dd:fa:
aa:8d:06:96:20:e1:51:85:84:29:0d:51:e6:8b:91:63:09:be:
14:f0:27:77:9b:2a:54:41:92:de:29:24:51:3b:e3:db:c6:70:
b1:8e:ef:4c:1a:da:f4:ed:1e:46:b4:98:e2:b2:fa:ff:92:bb:
ee:dc:f7:82:22:3f:f8:f3:82:92:ce:41:a5:f1:68:99:3f:51:
8d:ee:58:72:b1:ba:9a:f1:b3:b0:32:70:a6:c3:7a:90:12:ab:
6c:b5:67:3d:bd:22:ce:78:0d:64:d0:9e:62:90:04:30:c7:ae:
c6:3f:0f:d2:fe:8d:9e:c0:d3:50:ee:08:32:e4:36:fc:5c:93:
51:c2:6a:b1:16:62:5b:5a:78:f3:42:f1:2b:68:02:7d:04:1d:
2e:a5:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:51 2025 by rpki-client